SELinux: use a helper function to determine seclabel